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(57) imm 

mm] DESBi^Olift^:-Kt LT<7)CBC^- 
^■ C F B^- H t (7)M:^r^ll^f-C# S Bf 



Pf 4 ASHlll 



(2) 

1 

t J: -5 rmm.^fi?> z t ^mmb^msm i Mmcom 

[ imm 3 ] iriisT'n V ^ m -^j&iD e s Bf^-c-^. o . 

If 5f<ia 1 , t fzit 2 mmcT^mmm'^mmm^. 
[ 11*114 ] mmmmmmmMK HutSD e s hi -t^ 

^mm^m^w^zmt^ztt:mifthm^m4mm 
[ if *ia 8 ] BfriEMStijas^st: J: ^ . mtmrnmcr) 4o 

If t T V ^-g> f^- ^ *MIBx- ^ffiW^® ttii:^:^^ t 

[if*ii9 ] mmy^ -y^vmti-D e sbi-^t-^ d . 

ft^l, t;^^{i2iBttOlSaBg^3MIlIS&, 

[ffjRii 1 0 ] mEimmmm^^i}K ifriBD e s 
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2 

mcomffmM^mmy'~^mfi^mzmti'ti> zt^m 
[ msm 1 2 ] ifriBMi^ma^st i; s MiBa^nito 

^-fu >y i: miBtSilft#St:fSSfi$^xTV^^T- 

[tf^^s 13] ru V ^^immm:^ o m^m^ 

y n >y ^' Bf -^-ftiyilltc ffl I, ^ A, ix § MH'^. b /t.' , MS^i 

mf~^mim^}i.mmmhffm\.zm^ t,ix. -y 
Bf #^tc7)iif^^- h' \,znm-h w. 1 coi^aa^ ^^T-f-^ 

ifmizii\,^x. 

1 oi'DT'n >y ^ ^-^(^m^immcomrf^j^T^i^ 

^ 9 \,z%mmY.mmizm^hm^^mm.. t. fz\±^m 

ISlocOT^n-y^x-:?'. S/ltiiltl-ocOT'n.y^icfig 

< <>Ko:>yvi >y 9 (Ti'f— 9 bV 1:^7.9 \zW^^fifz f— y 
b iOra-C'l^rn >y ^ Bf -^-fbiOS^^^- F t^^pTiB-r 

i^^fe:^^. iSl^<7)rn-y^'t:M<i*:c^:?'n-y^x 

- ^ cMt- m^-itmmza (t ttriBMi^ h Mzm 

[HiRlIlS] HtiiBrn-y^'Bf-^A^DESBf^T* 
MiBJ*f^^-K*^'CFB^-K. f^ifiCBC^- 

K-c-S)^^ t ^wn^rf ^w^iii 4iB«toBi-f-^a:^ 

[0001] 

[^Bij««-ri.sffi^if] ^wm^^'J9iv^-9(7^ 

^it-n^^zm L . K L < {iftlSe^J^T'n .y ^ Bf ^ 

b LTODESBf-f-c7)CBC^— K^iCFB^— 



(3) 

3 

[0002] 

[ 0 0 0 3 ] T^'^' =Ji^)V'f-i^<^M^i\:':^^t Lxit. 

mm 6 4 f h 2r 1 ocoy n -y t LT 70 -y^miiZ 

[0004] :^mmtmmt^^m^^t:fj^ity'v3 -y ^ 

K ) limii^ 1 ^ tTj>< u )^mmmmmmizj: -^x^isb 
x^^^ mn-TfUd' y xi. xh s . 

[0 0 0 5] DE SBf^t;*ftT{i. S#^-h'i:LT 

4'?c7)^-F:^)^'SA6^jtLTV^-&. ^(7)^-K{±ECB 
(xl^::? hn--/:?' a-K 7"n>y^) , CBC (-tf 
-<7r7n.y^' i'x.-^—y^') , cfb (-^>f7r 20 
7'f-^V^^y^?) i3j:Z/OFB (T'>hT>y b 

V -f^-y^) <r>A-r>xhh. 

[0 0 0 6] .Itli^c04oO^-Kc7)3 -f^. ^W^^zU 

:Lfi(:>(r)2-:>(r,m^^^~Yi,zi5»hmmt 
ioi:Xfm.^comm\,Z':>UX. H2 4— |l|2 7^fflV^Ti^ 

[0 0 0 7] ll|2 4«i:CBC^:— Ft;j3(t-&Bf-^'ft,*3j; 

xfm.^(Dm^mmx'h i c^)^- k -cii: 6 4 f -y h 

t5i-SiJ§^X/^^¥3t^?'JMi , M2 , Ms , ■ • • t^Xti 30 

(^mmznLx^mmM^ 3 2ifiWn^Kx^^^ 

?ijCi , C2 , Cs , • • ■ <7)o■hc^M.1^(0 6 4\i:-yh 
tLX<DCl tmi^fi^. z^xmimmtLx<7)E 

comk. £*3 2b'-ybc7)A#x. i3xx/m^mi p-i 

i-tt^i^cDXh^. 

[0 0 0 8] Jj«:O6 4b--yhi:LTt0M2 <^A:^Jt->ffL 
Tfi, Bf^3t<7)*=l5!J<7)6 4b'-y bi; tT<7)Ci bCO^m 40 

5 7j&i^fi5^X, Bf^:3tOJj;:0 6 4b->y hi: LTc7)C2 

, mrmmizLxss^x^^b a b- -y ht^o^jj^s 

[0009] m-f-:?J];fllt*3V^T{i:. Bf-^3t<7)fi:|)go 6 4 
b->y b t LTiOC 1 <7)A:^3t::>ff LTfl-f-^EifMD 5 3 i)m 
fiStLl. . ^cD3^S«ir|-^^bMiiE 5 2 i: Isiatc^oMSS 

■ IP, f PSc*fflV^/L'l 6S<7)^^^ :fc:&3 2b'-y h 

o A# , j; mmm. i p - ^ * -^t^ i, o-r- -g. ;^)^' , Bf 

-^-(LMa t M^r -:. -C 1 6 Sc^^^tiiJ V ^X^-3SW^ 50 
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(^WJfXm^^htth . fE-f-^PlD 5 3coMSt*fLT. 

COM^COe 4 b'-y h b LXCOMi m%(^tlh . 
[0010] Bf-^5;<7)J^:C06 4 t">y b t LX<^C2 COX 

■^izMLxm-^-mmD 5 stimijtifcmz. ^cr>^mz 

MLXm^XcO&^CO 6 4 b'>y h h LTOCi hCOPfi!! 

S^f^afaS T^o;^<7)6 4b'-y hbLXcO 

[ 0 0 1 1 ] 112 5{iC F B^:- Y COWli^cnm^Wm 

xh?>. c F B ^- K mim^^m^'i^i'n o h coxh 

D . ^:SC{i lJ':ii±6 4OTT-*^ kb -y b-ro(:^fijs 
fL. ^0^?rJ{iia2 4ti5{tl.i:|Bim3Mi . M2 , M 

3 , ■ ■ ■ b^n.^. 

[0012] W-^CO^ mnm^c^S b -y b b tXc^M 
1 coXMzn&LX . l^'JX^' 6 6l,zWm^tlX^^^^ 

^^it^m^C0i.cr)lim2 4Cr)CBC^~¥izmfhb\^ 

txh h . mmmmo-)^^(o 6 4 b >y h a h:&m<r) 
8b->y hf>ft*iKOtiiSix. Ml bco^mmmmmbQ 
ti^btii^. «i^^com^cr,8\z-/hci tf^mij^ti^b 

fttC, ^C0mn^bLXC08\z>y hCi \±]y'JX9 6 6 

X. Mms.\f:-/hi^^x^ix. mh^WAzci t^mi 

[0013] T3tOJ^<7)8b-.y hM2 CDXMznmL 

X. cD^mnrnt^zn-th m^it^E 6 7 

;6i"tTi?iX, ^C0^ll<7) 6 4 f -y h (7) 3 -fecOfc 8 b' -y h i: 
M 2 i: cO^^fiiie^i^JIfa 6 8 i: #1 . Bf -t:35:co;^tfO 8 b" 
-ybC2 bLX\^-ti^ixhbi^i.Z^ ^(7)8 b' v h{±^>>' 
X^'e 6<7)ei.^fl!|ttett$il-l><. ■t^*)-^>V-i^'XiJ'6 
6<50itS#lF^^{48b'-y h:fei/7h§ix, V)Vl 
VOd-^St:8b'-y h>0^ftT^>ti.T. ^i/X^6 6(7)ft 

tfo 8 b- -y h Cs mrt^oi < nmcom^ifi^i>fL 
[00 14] cFB^—vcom^-^mizm^xii. tf 

m'^XcoM^JCO 8 b' -y b C 1 CO At) l^zMiB LX. WJX 

^70 i^zm^^fix^^fzw^^^ h/p I v(7)m^imm 

E7 l^^Ti^tL^. m2 4cr)CBC^~¥ bm^'O . fl 

§ „ COMaO^:S<7) 6 4 b"-y btfO ^ *>£8 b 'y 

tl. ¥:fc<5De^CIS08b'-y fMi :i!itii.tl$ix^« ^tlb^ 

mizB§mtim iz t-mi'bmm^z., u i^x ^ 7 o c^) w 

(48 b v htv-:^ hS^l. *t^iJtBf-^:5:c7)8b -y b 

Ci t^mh^ti^. 

[0015] Bi-f-3t^^?lJOJ^:08b"'y bC2 C7)A.^(CM 
JE-ti)3?!La{i^<|Sia-Cfc-i.. •r=5r;b%^i^'X^7 Oco 
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5 

h^>ti. T3ti^;j«:o8fv Mvi2 A■^^#^>i^^ hftfc. 

Tisi«t:LT, Bf-^^^JC3 . ■ ■ ■ com-^mmt/^m 
[0 0 16] m2 6i±cBc^-]i(om'^^\°\^com 

•C. ia2 4fc*3{tl.i:|5l«tC^:S;<J0ft^DcO8b'>y MWi 10 

h;H V i; mmmmmit/^E XOR[nIM&76t;lj;-9 
[0 0 17] fmmi 7 tLXii. f MmSrfflv*/:: 1 6 

^mmsi^m. «iao4ir^igs^^s/xi5'7 5i3j;t''- 

E X O R UlS^ 7 6 LT 4 HI/L— T$ it^ .r t i -? 
:bi7)ffi$r6 4b'-y h^Tt:*fLTfiUtf "0" 

7 7 1 tii:^-r ; h t^T^ h « 

[ 0 0 1 8 ] i C Tiiim^tfO/:: f 7 7 so.^^^ 

tea I Vim mm 1 sao f piacoitaat-irsixi. c> 

teSl P-Mil 6SS£7)f MiS[c7)MJiic-ir^ti§ic^^: 

[0019] ^LT4|lIg TB#jST- f mWL 30 

7 7A>A>a;^)StL. l-i^'X^7 5ttSll*l$tl'g>6 4b"-y 

[ 0 0 2 0 ] 02 6 (b) «C B Cf«-^[HlS&c?)|fl£*^J-Cfc 

1.0 |nIII|t:i3V^TBf-^3t^*^!JCOyn'y ^Ci j;;^A:^j$ 
^OA^JJi-bl^^'^SO^^tTf Ml[8 It 
^t(>tl^. 40 

[00 2 1 ] ^of iwms i(iEi2 4t:i5fti>fS-f-5!aa 
D5 3*ii^f-ri.7^^i«^oi>c7)-cS)'9, (a) kmmizAm 

^^80 ^ir-th 4 [llco;t^-Tc7)i6'f^c?)*ITf*t:A*Bf 

i ^ t ^ D . t.tzw,mn (^^m^zmmmm i p . 1 

6KSO^(:{i:£^3 2bv hco^i:jtteBl P-^ 

[0022] 1- 8 2 fctS*l*lS^X7"^Hf-^:fc<5Da^JJfO 
T-n-y^Ci (7)fI-^^^{iEXORIlIfiS8 4tA:'3S 50 
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6 

iX. \y=JX9Q3{zmm^tlXV^tz^m'<-^ V)VlWh 

v^oi (r)X-n\iz■m■h^%^M^±m2A\,zii\^hhn 

[ 0 0 2 3 ] ISI2 7{±C F B^— HOBf^^JMUlg&cOia! 

^-f. 1112 7(a) fcfcV^T¥3t<7)S1gi3<7)8b'>y MVIi CO 
AS)t3)^JELT. 4-n^>'':^^8 6tt&W$n.Ti^l.^ 

[0 0 24] f Misc8 7{i:ia2 5^ci3^tl.Bf-^^[:^!^aE 

6 7 . f ^^5-^02 4 tCfcttSBf ^^t^yiaE 5 2 t I5l« 
<7)^!lIlS:tT d i i^)-Cvt) D , a 2 6 io ft l> i: |Sl«t:^Ji 
MA^aWMm^ifmLhiXh. ^V9 99Qiii.tfV 
8 6 ^^n-ri. 4 n<r»v~'T<r>m^\izi. h 1 6®co 

( El 2 6 (ciott ^ t wmzwmm-. ^^32 b ^ 

64b" 'y htO^^>. :£8b-y fCO^^^E XO RlIIfi&9 1 

(cttJi'jS^x. A:^3T:icc7)8b'-y bMi tPfiiiWiSffl^a*^ 

[002 5] |fraiOj;dt. ^i>"X:J'8 6tCfS#)§iXT 

v^/i*oW'^:?'b;n vtiMi coxijiznmLxfmms 

7lzmtl^tl^:l)\ ZC7m^cr))^mt8h'^y hM'Zi^y 
h ^ti. -t^j:h-h:^cO 8 b -y h j&^'jtT i^tiX V 'JX 9 
SS\<zmti^ixh. ^c7)bvMc«5 6b~/ hXhh. 
frnmSlcOAMScOJU—'TCO^kcOtii^fjcOoh. ftifc 
ilJ08b-y hC0^ti^BXOR\B\S^S9(,zA^^tl. A:^ 
Ml i:<7)PfTO|^IltI?5^-i:^>tL. ^«^*c7)8b'-y b*^ 
St^fllt, l^i^'X^8 8t;fStt§ixTV^^ 5 6b^y h 

ii^-&mi>zmm^tLtm^x\ ■f^u^^'som-Lxu-j 

X^8 6tC6 4b"'y hc7)T'-^i: tTtSMSttI), 
64b' -y bfi. ^3tc7)JiC07"nv:^'M2 0ASJtcMJEt 
T. 02 5COBf-^'fb^!afflE6 7tCffi^|§n^iht3:5r 

M2 i^xTcoyn>yi^i,zm-hmmmmx'$>hco 

[0026] 112 7 (b) l,Zt3\-^X . Bf-f-^ttfOftHOtO 8 b" 
>yhCi <7)A*B#jS-r\ l^vX^9 3t:tS*ft$tLTl^.S 
b ;k I Vifi f Mi* 9 4 ^z^t kix. mT^tmm 
tC-bU'^:^' 9 5, l^i/^^9 3^/r-f •S4[l]tO;P— TCO 

tl^ m2 5(Dm^-^t^mE7 iCDU^tftLXcrieAh'^y 

hCOo'h^S'ii 'y h>0i"EXORII]f#9 7taj.tJ§ti, A 

.y ^ c 1 (JO^mWf&aWT&i^: i^ti. 
Ml >^^"m:ft$tL^. 

[0027] Ui^Xiff 9 SCOf^^t LXCO^M'^^ h/t^ 

I vcomt^ fmm.9 4 i^zta^^ti^mj^x. mmi^z^co 

I^^{i8b'-y b:fe^:7 5 6b'v hiii^U'JX^9 
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c7) 5 6 b'>/ h^i^fil, A:^iif-^:i:8 b'-y b Ci ii^^^Miz 
[0 0 28] 

[^BJ;&iJ!t^LJ:3^:-f--Sil®] i<7)J;a=3:DESiif-f- 10 

K) . f mm^^t^^mcommmm^m lt 1 00;!.- 
iz$3\^xim^~ Ft:Wii5t-s^- vmE^mn-itcom 

fz. ^ti^<7^:mi>zmLxii. <k<^mmmmzm^^ti 

Tl.-^^, 20 
[ 0 0 2 9 ] U. S . Patent 5,381,480. Butter et a 
1. "System for Translating Encrypted Data" 

xr»*»'it±t. ^:^hti^±^<^^fzibt,z. htK)m 

[ 0 0 3 0 ] JXtCD E S 7"n i?Bf-f-<POSf^^:- b" h L 
T{i|f)iic7)J; dtECB. CBC, CFB, OFB<7)4 

<. mmjv-Ti,znLx\,mm(n^^^^L^j:<x i: 

[003 1] CiXtC^LTC BC^-bTi4. Mx.ifl;j 
m'<-^ V)V I VcolBt A::*! >y ^ i: (^mmmmM^ 40 

to. icoflitcM LTDEsjyia^^f34£:>^*^'S>s, a 

fzCF B^- KTii. Bf-f-{b3!afMtfcv->Tl3JfiB-<.i^ 

MJIISScO-gPt A^I7'n -y ^ ^: O#fflfiWI^Sl«0ffl& 
[0 0 32] ■tts:h-hCBCt<zm-:^=^-vmmiD^ 

s ^a^cos^DT-. 4 c F B t,zm-^ ^ - h'^!aa{±iif^ 
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[0033] D E sm^imm^i^om^m^t lt 

(4. ^tL^.C04-:)c7)i*f^^:-K(7)^TS:lltfT-S'^[lIS& 

^mm-h ^htm^ L\^t^. m.mzi5\^xmmzc b 

C ^- K C F B ^- K t tSiltfflV ^ ^>iX^i5!!.aiMl^& 

^ «^-r s i i; *iffliiT'3b i; ^ a r-m-s^^ o ;t , ^ 

[0 0 34] 2|s:^B^{i^t;CBC^:— FisCFB^— F 

(^mmzan^^wm^x'^^tzmmt^ ^t^n 

[0035] 

[l!ga^j|li^t--g.^^46c0^g] m 1 {4*:^HJC0^ 1 <^ll 

Mx.«Mf^^- F i: LT C B C^- K i; , C F B^- F 
t coiaS:^rco d e s Bf -f-ftJ^piSrH^f T-i^ I. . >y Hf 

■^^CiOMa^^f a ftMBi^JMInlS&Ottl^T'n -y :?'|1T- 
[ 0 0 3 6 ] El 1 ti3 V ^T . f~^}m^fk 1 .y 

tfcfiJyLilftJ^ieS^ISSW-Stc^T'feD. 

x^X'ht. 

[0037] mwL^mmk 2 jsru -y 9 ^mmM. m 
utxi'&smmxm^^ix.h mmsm i: l t o f wit 

^fflv^i>aasto^m*lltf^-g.i>fOT&-s.« ^-b"i;a 
JM^s 3 {ix- ^fsifi W5 1 h vmamm^ 2 1 c7)PEgtc 
fii'^ti, ^-^mi^n.xhz'mi^txx^^h^-^^ 

K 4 fcjic F B ^- h- tc>iftjE-r m^^m^-th i> ot 

[00 38] CFB^-KO^^SffltCisC^T. 
S2tJ:-?T. DESBS^^cOA^'jT'n-y^'x-rJ'cOBf 

^-ftt^it^ (t IfraioMf^^Jl L T ^ ffl V ^ 

h 1 6Sco^3&i^tsst[M]. M>t^^4[MI^^ii■^tT^^TS:^^ 
I.. ^<r>^^\z\t\n<n'^mmz'B\yz\t. 

[0039] :L<nM%m<^^m.<nWik<n 1 Iil^l^<=ft[il 

. mmmmm 2 i t nm^m 
\\,z^%tx.h. ^y^x^(rimm\m(r>mm^-^^ 

til., 

[0040] 4 7^^<r<7)aSfc[lI<7)MIlCOS*0<7)[llO^C7) 

ft. ^(Ty-mfs'^mmmm^ik i^z^^t^^tthh^ 
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[0041] c B c^- \^cr,vm-^[:MMcomnmzi5\,-^ 

CFB^r-h't;joftSi:|S|«t:, mf^ODESHf 
^■^<7)yV3'yi'y'-:!'<D«m-^tlZiSif^mmmmb LX 

comMmmi:m^^^ 1 6fS:conmt\ mmmz^^fx 
ti. mmmm^m2izx-^xy'~^w^^mizmm^ 

il-So 10 

[0042] tfzmmmm^m2i,zj:i,mm\°i(ommco 
m^<Dm(7)mncomiz. ^-i^^^^sizx-^xxij 

[0043] ia2{i*^0Uo^2«siifiiJ«(;>pfje-f-.s 

X . mmmm^^ 2 1 x- ^ fstt#s 1 1 c^m^zm t ^ 
fi^ rn'y^Bm-{{:coni^^-\'izMm^hm2cr,mm 20 

[0044] *^Bj^cDSg 2 osiiiftmitc a^^xii. mi 
commmmizisif^ t R«t , m^^mmmmtc f 

- h' i: C B C ^- K t cOM:^Of*#^- K &||ff T' ^ 
t COT'S) ^3&5!, C BC^:-Ktc:i3{t-&^:-b'^5aoa* 
e^5rgE^^-*lltf^l>«0{S^ 1 O^- K5!!ia¥S4 Xh^ 
cOI,znLX. CP Bt-Kti3{t-S.S2|sW^^-K5!!!;fi 
Jin 2 co^- FJ^il^g 5 J; ^ -C^ff §ni> . 
[0 04 5] CFB^-KtioV^T, Pifc5M¥S2tC 

J; -s.^f^is?F^raifc^Mv ^^16 mco^mii , ^ i (ommm 30 

filgjo 0 iD I ^-C X - i?' ^m^m 1 tcfS*i*i § V ^ 1. X 

-^i±. ml<o^-^'^^a^I¥S3tj;l.#m^!!M^&-'^f 

Mi![i!!ta¥l52tcJ;-&1«$t[MlOMac7)ftf^c7)lMl^|^ 

[0046] mmmm^m2i>zx ^»mm(7)mm^^^ 

-^j'^-'m 1 oiijt?^istc*3(t-g. ^: nm>^z\^^^fi^ 

\,z. ^<D^mm^<r>-ubxf}^-i?yu^y':^^m\^x 40 

1 i^zmm^K. <>k<^^u ^y9^-^<^mn\m 

[0 0 4 7] CBC^-KtiSl-iTtt. Hl^O^-KM 
il^^S 4 i T ^ 1 i, ^ - H 

m.3\,zk^}iwmcr>Mtm^^tt. m2(r>=^~Y9m 

^mimwm^z^t^(Dimi'^^o i t t>^r< . sswt; 
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[0048] ^wmm^mmi'mzii\^xi>i.. mm 

D E S :/n ^ mmm^mii'ir d iif^35!La*ffit;i3 1 ^ 

X . 1 0(7) y a -7 ^' - ^ cOHf ■^^t^Jlo**Tlt§.>ST-i?!]i 

m^mi-\i^:n^tLhhMz. mm^^ hjvmm^tix 
\^i-zv-jx9{z^<^v^^i]:smf,ziii,i^h^m^mm.. t. 

[0049] ^LXVi^y.-^ tifSttS a?t-f - r?- ^ to 
1 ocorn -y 3^ , t.fz1,±i<r) 1 o<?37"n 'y ^ tig 
<<!*:£^:/n-y^'7-'-^i:oraT\ ^O^nv i^Bf-f-ffiO 

mmK ^ CO 1 -PO^'n 'y ^' < Jj^corn 'y x- r?' 

tLTffli^^>n. }!Kcr>y^^y'^^—^^zn-t^m^n 

[0050] if.?im<nv%mmmii'Mzi5\^xit. mm 

■r^co^m^i!' hMzMLximmc b c^- y^x-i^ 
x-hy'u cnmx-^m'^- }^><znm-hm% 

tmn § fitzmz . c f b ^ - k -ciijif^^ - f {zn]B 
■t^mrj:m%itmmmzm^^fi^zh^x<. mnm 
mzn^Lximfmm.^m\^h 1 e^<7yMmifimm 

w, 1 (^'mmm^za^^xmv^ htitij co-c* -s> , 
[005 1 ] vximm Lfzi. 0 ^mmzj:m^c b 

C K h C F B b' t (T^MIf^mf-th Bfrf-^CTHI 

i ^: ti^x^ 6, tfzmi c^mmmmizm^ 

[0052] 

[ m^Mcommmm ] la 3 it^wmm 1 (omtmm^z 
B\-^xm^-^^:>ixh c F b^- v(rM^im^<^m^i^ 

-t, |5lll«i;ll2 7(a) iZTjkLfzmMmijZMm-thiyCOX 

hh-fyK cBc=^-Y<r)^im^hm.^-^h^xmm 

't^fzi^^zm2 7 ia) \,zm^x^v^hfix^^fz^y^o-R 

fiUtEXORHII&l 2-t}m\'-^i^fix\-^^. 

[00 53] l2l3t^t5V^-CMB'^i?h;H Vttlxi/J:^:?? 

1 l(:fStt$tLTV^-l>« T3tcO»*J<:08b'-y MVIi cOA 

mwii^mmn) i3\,z^x.tyixh. roi^ExoRni 

S§1 2(;MLT^i-'Xi' 1 4;:)^Ji>. Mtlt "0" ^^ttl:^ 
§ix^i t tci 19 , U-i^-X^ 1 1 iz\m^ii.XV^fzmm 
K.9 h)V I VOfflJi-ecOS S f 1 3 tC^i. ^.ai. « 
[0054] fM^13{±, 12127(a) {ZHnhtnm. 

f.zmuiAf5.cDfmm.^m^^^mmm^^tf:^ . 

^91 5 , V 1 1 ^n-Sfth 4 ^cr:i}V~T<r)^im.\iZ 

i.-oXimm.^mv^fzi^ mommmik>fi •!> i co i: -r 
±tzmmni:o\zMmmi p. mi esacoMs 

(cWt--?. 3 2 b' >y h cOA^x . I P- 1 'k^ts 



(7) 

1 1 

[0 0 5 5] 4\B\cr>}l'—y'C0mc0fmMl3C0ii!,t}C0d 

yrt .y Ml t commmmmmt^b i^n. m^c^m-^-x 

[0 0 5 6] rn-y^'Mi COX^IiZnmLXU-JXi^ 1 

S7"^^fl8b--y h{±EXOR[l]f-&l ^il 
mmX-Vi^T.-^ 1 7j|!lt:m*$^l-&*^\ -?-064b'>y 
h {4 8 b' >y > S> 7 h §^LT« t fcflCO 8 b' >y h t-^X ^ 10 

TC7)*|TB# OI^^CO 5 6 f -y b 3{)i£{|«t . f Mit 

X\ •fel^^^'l 5^:frLTl^>''X^' 1 lt^64b''y hCT) 
X - ^ $ !> „ tfz^cr>m}lsXUi^X^ 1 
Xtiy^^y^ Ml 8 b- -y h 7E?^fS*l^§ » Z^TU i^X 
^1 1 t1S**I§tiTl^l.6 4b'"/h{i:. ^(7)it-C{4J^: 

[00 57] 7n ^y ^'M2 OA^J^^ST". kxX^' 11 20 
C^1^l^§0-5-fe*W8b'-y htiEXORHIifll 2t,zm 

ti^n. \ A{zw^^fix\^hmMo-)y'u -y^ 

Ml CO 8 f >/ h >; tOiff{!ie^fMfa/&i ^ tL. \ 

1 4ttl^3§tL-g.Sfa) 5 6 b 'y h i: J±t f PBgSC 

1 3 1 Ai^j z <mmmi\z f wisci 3 ai^j 

^:5rl>6 4b'-yf{4, IfrMt llWt tTStS b -/ 
7h^iX. 5 6b-.y bj&iVi^'X^ 1 7 WSIfiS^xS, C 
i\.m%(^y'vi V ^ M3 coA:^jB$,'Stcfc(tl> f Ma 1 3^ 
cOA*f'-^'f^jSO;t*6T35 -1. » 

[ 0 0 5 8] f MSCl 3, -bl^^^':?' 1 5 , P-yx^' 1 1 30 

^irthA m<^)V~~r<r>m:'jm^x\ f mi* iscotati 

CO O 8 b' >y h t A^l M2 8 b' >y h ^: CO^^Me^aW 
^^EXORHIf&l 8tJ;oTi:^)5fx, Bf-f-:fc^^J<?)iJ:«o 

ioraji ui^'x^iA (DWimmiiii:^ s tL-r\ e x o r 
mil 1 2 umt if " 0 " 3&i-¥-i. ^^fLi. t CO h -r 1. « m 

[ 0 0 5 9 ] 134 ii:^^mncom 1 cDmm^mt vxc^m 

[0 0 6 0] m^\tOFB=^—Y'!^i\LW}^ (^tOl ) 

col^iHJHt^-S . C CT-fSfflS^iS Hff^colSISSP^jS^o 

^i.xhh. t-^mMco^^yu-y^Mi cox-^ iot-^ 

V^i-bU'^^2 2, 2 3. EXORIIIS&2 4, 

2 5$:^LTfMSc2 6tC^;tfei.„ i C0B#-fe ^ 3? 2 50 



J^iH2 0 0 0-7 5 78 5 

1 2 

2, 2 3ii\^'JX^2 l^^^comtiimiKL. tfzEX 
OR|lIg&24, 2 5tC:MLT{4-fe^^'^3 1 , 32Sr:n- 
tT5 6b-v btSb'-y biT) "0" coir-^'*^A^J$#l 

x\-^i>, zcr)fzi^]y-jxi^2 ii,zmfi^tLX\>-^tiii^m< 
^h/i'ivcr>m.ii-^(r>ttfmm2 6i,z^ti^ixh. A 

tzl^-JXi^ 2 1 \,zmh^flX\^tz I VC0ffl{i8b'>y hi^ 

y h ^tl^fmx\ m'm.mz^<r)^t.ViyX^ 2Sl,zm 

m^fih. ^Lxfmm.2bi,z^±ix^AWL<^^mM^ 
(^^m^mi^^ v9 2i^i^hx\^-jx9 2 \ {zmh 

[006 1 ] [1|6{4C FB^-KBf-t-ftt&ff^ {^<n2) 
(^tmmXh^. |slll|{4f MS!t2 6. 'fe^^^2 7. V 

=jxi}^2i^i]-ti,4mcr)ji'—ycooib. m2mstm 

3mscr))u~Ti,zisn^mmmi'p<^tmmx'h^. zix 

T(CtoV'>T{i;-fe^^^2 2 , 2 3(41x£/X^2 
lA^^^OtH^t^MtKL. S/c-b^^'^3 1, 3 2{45 6 
b"-yhCO "0" i:8b'>yhC0 "0" ^r^tl^'tlEXOR 
IMIS&24. 2 5l,Zlii-tsLX^^^fzlsb. h-'JX^ 2 iCOf 

-^^i^cr)ttimm2 6^z^ti>,ti. A^crmmm^ 

\t'^V^'^2 7'ki]-LX\y-JX^2 Itc^SlftSilS, 
[00 62] mi\iCFB^-Ymmm^ (^(7)3) 

cotmmxhh . mmi,zii \,x. vvxy2\ 

f I. ^ S 3 HI S cr,)V~ TcOMHISSii: . Wmz^ 
U'^'^22, 2 3. EXORIlIfi&2 4, 25Sr^LT^ 

cotif Ml:2 6tc#i./i>^x-l.<, f Mli:2 6(7)a}:^3(4i 

6gf0 f ^a^fflv-i/iljjai^^' h/L- 1 vcoBf 
aT'S^Ssts^. -eo:t8b--y hj&i-KDttiSii. A:^7®tc 
H-X.i:>h.h^^oM^(^>y''vi-/9mi C08b"-y hi;£7)|fe 

mmfF xoRlHlK30tj;'5Tfc ^>ix. Bf ■f-:S;tfO*tJ 

ya-yi^Mi <7)8b'v h{i:W>>'X^'3 3tifgJ[^S#li.. 

[00 63] |HlB#tl-'>''X:5?2 8tC^Stt§iXTV>:^5 6 
b--y hj&ifcMlC. f MiC2 6C0tB:'3COa-^t8b'-y Yif 
=&«t:fStt$tL^ffMT\ 'lr^^^ 2 7 ^it\^XV-JX 
9 2\\,Z(,A b>y hCOx-^'j&it&Sl^^n.'S.. 

[0 0 64] ia8{4CFB^— KBt^-ftSftf^ (-e<504) 

(rmmmxtyh. i,rT'J4A*i?)¥^c:/n-yi7M2 t;^ 

m-hmKnmm'mi^h-h. t.^vi>x^2\\z 

{^C03) Xlim^tlfzbA\L-/hcr)'f~9tiK 
^22, 2 3SrirLT2-0(7)EXOR|llff&2 4, 25t: 
■^ti^tlh. iiOff§'t^i?^'3 l{i:5 6b'-/ ho "0" 

3 2{i^>-'X3'3 3t1Sf|*|$^XTVi|.T^"-^'. 
±)-*5A^l¥:S:O«l!D«07'n-y^'Mi cr)f—^^tii:^LX 
fc'"9. EXORIIIg&24{464b'>ybcOo*>:tfil56b' 
■y b^^cOii f Mm2 6(c£il^lt-.|.55\ 0ff#2 5ii^ 

ms t'y h t Ml 8 b-y hcommmmmmitati^^ z 
izMm-tiy A mcofi'—ycommcrim^iz f mwi 2 e iz^ 

t ^>ixl> . tfzmmmz:i(0Xtsi±8\i''y hi^yh^ 
tl. ly>'X^2SI>zm^^ix^. ^LTfMSt2 6t±3 



(8) 

1 3 

[006 5] m9\tQ.¥ ^^ — Y'^^\YM\'^c/-)9 A 5^ 

it. 4-:><r)i:f'n-y^tjZMmLX^coi, ^C02, 

Ci *5:f#^>n^» i!K<7)XJjfu-/:!'M2 JilTt^MtT 

{4, 4-:>(7)i5'n-y^tcMjilSLT-e04. ^<7)2, ^co lo 

2. -eoBOMSj^^B^f^ix, ai^)7''n>yi;'C2 lilT:^i' 
#^>tL§. ^iJ. ^J;t{fB&^^rn-y^Ci (iHT-Ci^ 

mLti J: 0 4 iiiao;k-T(7)ftmt f Mis:2 6 coaj 

i: 7-n >y M 1 t cr)mimfMmm co^$^ ttxm. 

[00 66] HI OtiCFB^-Fia-tttcfl^ i^coi ) 
^OiiBJElT-$)-&o |HliatfcUT{4. Bf-f-3tt0«%[(O7"n 20 

\^h^%^'^9V)VlYa:>m.-h^-^V9 9 2 2, 2 3. EX 
OR[IIS§24, 2 5Sr^LT^<7)i S f MiSC2 6(.C-^i. 

f watc J; 1. 4 soi^aaos^Tf*, ^foismti-fei^ 

[ 0 0 6 7 ] m 1 1 F B ^- MM-^t&<^ {^cr,2) 

4 0-^^0 2 mao/L—Th BHIBWP-:?" 30 

V»^6 4t^y hCOx— ^'{4-feV-^'^'2 2, 23, EXO 
R|Hli&24. 2 3^itLXfmW2 6\,z^■x.^h>it. fM 
m2 6cr,mtHt-^\y^^27t:-fi-LX]y'J:^^2 1 Icfg 

[0 0 68] 01 2{4CFB^-m^it)f^ (^03) 

<7)iJiHJ0T*-&, |i|0J±f MiSc^fflv^§4[niS(7);i^-r 

OMMtt^-^^^t-o P5/'X^2 l(;itSMS^xTV^i> 6 4 
t'-y hOx-rJ'Jis -fe^^'^2 2, 2 3. EXOR[IIfi& 
24, 2 SSr^LTf M^2 6t:4-i.<i>tL^« fMtfc* 40 
ffll^-&4S£7)^Ji, :t^3 2b' >ybi^A#i.. tiXt/M 

mw I p-i ojyiaof*^', ^omsf^s^ lxco 6 4 f 

■y h<7)^t>£8b''y h^O^'E XORHIIB OI,Z-^t^ti. 

■y htOifM-t!ie^afP*^'h^>ix, -e<7)*SS{i:tti.:fj®;6^^, 
^X(7)mMicr)y\3y9Mi tLX\^^^ixt. ±fzn^ 
2 St,zm^^flX\^h 5 6 b'>y h^^'aiCl. 

A^tjiif -y C 1 CO 8 b' -y f :6>":&ffli|tcieK§ ii^ 
?^5^T\ -blx^'^2 7Sr:fM,Tl'S^'Xi5'2 ltc64b'>y 
hc7)x-^ i: LtfSSl^^ixi. , 50 



#132 0 0 0-7 5 78 5 

1 4 

[0069] 01 3{±CFB^— Hfl-f-ftf^tOrJ'-l' 5^ 
^^^-f-bT'S)^„ tt^7O-tCi3{t-&tSc*{i01 0~ 
01 2hLTi0'f-Ol~^i0 3<?)MS^^-r. A^JBf-^ 
iSi^OftllOcOT'nv^Ci cOA^)t>pfLT{±, 4ot0^'n 
>y^'t:i5V'>T-€-<7)l , ^02, -?-i^2, •€■<7)3^0^!!M3^)i 

-g-o JXOA:?3Hf-f-3trn'yi?C2 mT<JOA^Jt=:^ftLT 

[00 70] 01 4{4CBC^:— HBf^-ftlll^^ (^O 

1 ) (DmmmXht. CBC^:-h'tfeV^T{4A^¥S; 

-y ^{i:A^l®*^^> A^lStL, tti^lBf-t^C^a .y ^'{4 
ai±i©5&^4>ffi±iStL§. *-rA:;'3©*^^>A:ti§nfcS1gj 

^^■XyV3-/'^Mi 64b'>yh{4, -e<50o-fe:t5 6b'>y 
b75i-tL-^^3 11', ^8b" y b*^3 2 , 
-?-tT-bP7^3 1{4^<7)5 6b'>y ht:EXOR[llg&2 
4t:. 3 2{48b--y h^2 5li^;tl., 
[007 1 ] — :^rV-i^'X^'2 ltc1Stt§fl.TV^I.MB< 
h;H Va-bl^^'^' 2 2 , 2 3S^tTEXOR|lIg& 
24, 2 5tc4-iJi^X. lOiJ^^' h/H Vi:*^0^OT3t 

«fMi5:2 6t:#i.^.^xl,, -ttT^OffiteSl PSr-irtj 

LXVlyX^2l ^z->im^flh . 
[0072] 01 5{4CBC^— FBf-f-^bKlf^ i^CO 

-p-^i, 2iga*3j;?7'3 [g ato/L— tti> Kiff to 

gJHfl0T-fc , l- y X ^J' 2 1 tirSI|t| $ ^XT V> ^ 6 4 b >y 
hc7)-f'— ^{i^ -fe 1^:7^2 2, 2 3Sr^tT 2-0(7)EX 
ORIHIJ&24, 2 5t^x.^il.S„ ;<OWf-bl'i?:5'3 
1, 3 2{i:mm5 6 b 'y hco "0" , 8b" -/bO 
"0" ^\iiijLX\,^i>fzib. ^C7)6 4b"v bc7)x-^'(4 

^cr>^tfm(.2 6iz-^^i^ixh. -tLxfrnm^m^^ 

7.9 2 1 tCt&ttStL^ , 

[00 73] 01 6{4CBC^-FBf-^^t,t!if^ (^O 

3) iOi^0B0T'^5l.. |B|0{4f Ml:&fflv^^4llIBo;^' 
-Tc^)|6f^^i^^Bg-r■l. %,<ryxhh. Ui^'x^ 2 1 t:t§*ft 

§tLTV^-& 6 4b"y hc^Ox-rJ-^, lujiEi: 

:S?22, 23, EXORlIIfi&24, 25iiYLX. ^CO 

ttfmwL2b{,z^-t^ti^. fmwL^m\>^hA^<D^ 

:fc^3 2b-y btOAtL#x., Bit/'iSteSl P-i(7) 
^taaiSati, -^V^^ 21^-j^LX\y'JX-9 2l\,z1im 
^fl^. Vi^X9 2 lizmm^iXfzb 4:\L y hcT^x-^S' 

EXOR[lS&3 4^:(rtT^<7)Stai:^j®:{?>^>ai* 

Bf-^;5:oei5gco7"n-yi?'Ci ^: LTffi:^§-g., ico^-b 

l-^:^'3 5{464b->y "0" Sr E XORIl]J§3 4 

tB^JtTv^^. t/::P'>>';^^2 1 tc^MftStL/cm:ftHf-^ 

S;cOft1fD<?Dra>y^'Ci {i, i5:<?D^S:7"n>yi?M2 <0A 

^m.^xn^itWii'^ i^coi) t j;':>TAS]7"a-/^'M 

2 i:, trrMtmmi^zLx . mmmmmmti^t^fii>zt 



(9) 

1 5 

[0 0 741 01 7{iCBC^:-KBf^^tijlf^c?)^'>r S 

y^^^-^~VXh^. A^J^^y o V Ml cDA^JtcM 

■y^Ci *«ai:fj$tL^<, Tjt:/n-yi?M2 OTFcoXtHz 
[ 0 0 7 5 ] la 1 8{iC B C ^- Vm^mfP i^COl) 

(T^mmmTh c b c ^- vu-^mi^x-it . ^^^^ 

h;H V{±^>>X^3 7tfSS*I$3fxTV^I.o M^cOt^^ 10 

1 T Ji c=OMBIJ 5 6 f -y b . 3 2 f Ji^^M 8 f v h 3{?iM 
*l^$tLT, 20<:7)EXOR[lI|f&2 4 , 2 5tc:-^X^>n 

So >I<?3Bt-fe^^'^'2 2, 2 3{±Jttc5 6fc:"-y 
"0" , 8b-'-:/h(7) "0" ^tii:^3tTi3 0, ^c7)f^i6A 

S]Bf^:fcyo V ^ c 1 o 6 4 b' b {i-t (7)i ^ f ggfit 2 

ffll^S4SwMilS*i±. -feP^'^'2 7^^LTl/J^'X 

^2 

[0 0 7 6] lai 9{i:CBC^-bfI-f-t!)f^ (^0 2) 20 
i?)!^!^^^*)^ , liliaJi f M^^Mi^^-l. 4 mcr>}V-y°(n 

a 2 0 a . 3 0 B wb-r ic*3(ts»{WJ§iaT-fc 

So |5liatci3V^Tb'i^'^^2 1 tc^Sll^^ixTl^S 6 4f 
■y hO-r-^'ii:. -feb-^':5?2 2, 2 3. EXOR|II{f&2 
4, 2 5S:^tT^c?)tt f M^2 6l:-^i.i?>ix. fM 
iScSfflV^S 4 gO^^j^Oi^aaiSmfS-b ^^':^'27*^L 
T i^'-X ^ 2 1 ictSIl*!^ as o 1 7t i^'X ^ 3 7 tfSlft 

Si^iTv^s^ow^^ h)viYimi.\f 3mm ( 2 hist- 

4. J; V ^ ) <7);i^-ro^!!!«IB#t 1^ tJ' 3 6 tcfSttS il 

So 30 
[00 77] H2 OaCBC^-Ffl-^Klf^ (^03) 
^OlMBJ|l-r-S5)S, |Hllltfcv^T4lIIgWl.~ri: LT. 
\yi^X9 2 1 tfSft^SixTViS6 4t:"-y b<7)-f-^{4^ 

f Mi^2 6(:^^^tL, f Mli^ffli.^S4go^ 

£^3 2ev hcoAtL^x.. iJii^'itteai P-1C7) 

^ 2 7 &:n- LXV=JX ^21 A> 
iXh. 1 \,Zimi^iXfz 6 4 f >y 

EXOR[i]ff^3 4(:#i.^n, i^s^'x^ 3 et^tsttsn 
TV^SIlOM'^^ h;l^ I V t«Ogffi!!Wl^aS];i>^^: i^fi. til 

So i/::>rwB#vj^oBt^:fcyn>yi?C2 tcM^s (^to 

3 ) commztiX-^X E X O R Hlf^ 3 4 l,Zli!,:ti't^fz^C0 
f-^tLX. A^3 Bf yn 'y C 1 ]y 

x^3 7t:tSttStLS» 

[0 0 7 8] 02 laCBC^-ba-f-ifift^sO^-f 
^'^^ _ |. S o |5]0tciD V -sT Bf -f-^tcoftlsocoy n >y 
i?Ci OA^JtcMLTJi. 4-:>c7)j?n-yi?tcfcv^-C^c7) 

1. ^co2. 'e«02, ^coscommmhtL. ^^coft 

-y ^ C 2 • ■ ■ c7) A:*? t>fff - S «J-f^{i^ < ISiar^ S . 50 



#M2 0 0 0-7 5 78 5 

1 6 

[ 0 0 7 9 ] 02 2i±:^wMcom2commmmt lxco 

C F B K i; C B C K CO 2 -:3<7)t!jfNS: ^t-S Bf 
-^5!!LIl[IIS^i^Sfi!c7'n-y:^0T-*So 04i^lgli^Sllfi 
mmiiZi5X-^Xl±^ 20COEXOR[M]f&2 4, 2 5>6i'CB 
C^:- h-fiftT'^r< . C F B^:- h'COBf^-ftil&f^t^i^V^ 
T^j, f Ml:2 6tC#i.S^S=6 4b'>y h<7)-f-^<7)-5 
ibXmMS b'.y M;*rt-S^IKWI^SfP* ^: S7^^46tcffl 
\,->^ixX\,-^fztiK 02 2tioUT{±itfOSKffie^JMt]i5^' 
EXOR[lIg§4 5t:j:-5-Ci:^>:fT.S.'i[t;S3|s:W^ffla3&^' 
h^, Zcr,f:ii!bm4cr,-tU^^2 2. 2 3 ti 1 oco-fe 
^'^41, EXOR|I18g-24 , 2 5(±l-:)tOEXORtll 
^42. -iiU^^Sl , 3 2{41-QO'fe^:7^'4 3t;lJ; 

[0 080] m2 2cr,m2cr)mwBW±m4<7)mi com 
mmmt<Dmm^m^mi,zc f b^- HBf-f-jL»#t:ife 
s/iA6. ^(7)mi¥i'^'\:Azm2 2iz-:>\^xMm^h. m 

2 2X'lt. m^COC F B^- b'Bf-^^Cl&f^ ( ^CO 1 ) 

MJE tT , )y=JX^2 1 l^zmm^tLX \ ^ S ^m^^ h IV 
9 4 \ ^ EXORIl]|S#4 2Sr:J>tT^OS 

sfPBic2 6t^x.A>a. ^(^mimmt'^v^^ 4b 

iirLXV''JX^2 1 izmi^tlh. Bt^-ftWlf^ (^C7) 

2) t:i3(tSKll^t|5]«-r-fcSo 
[008 1 ] Bf^^bWft: (-e03 ) tfflEi^LT. 4tiia 

xoRm^soizx-yxmmmmmt^b ^tt. tii:^3® 

^^i^mmi^^'^-Xy^n-yi^CitLXiiitl^tih. tfz 
nmz VV7.94 4 [Zl^^tCX I. ^S 5 6 b" >y h if^m 
\,Z^ f MiC2 6<0tti:'j<7)5^fc8b'y bhA^'j^'n-y^ 

Ml 8b' ^y vh<7:>m\wmmwf^xo'Rm^4 stcj; 
-iXh tyfvTz^mfi^'mz^m^ixhim.x: ^ ^V9 9 

4 6 ^^LT 6 4 b'>y V<7y^—^ifiV-J7.-9 2 1 tC^SIft 
Sil-So Z^^U'JX^f 2 ll,zmMi^tltl'f~^<^o-h^ 
8 b' -/ h {i-TT't: A* i: t7)Pf-t&e^|^S^n*i A>ti>t 
T-^O. J^c7)^:5:7'n-y^M2 c7)A±ltcM{ELT'fe^^ 
:5?4 1. E.XORm^4 2^i]-LX^cr,tt.fmW2 6 
iz^ti^tih:itl>z^j:h. 

[0082] CFB^-Kfl-^, CBC^— KBf-^-ft, 

^tmmmizmtx'hhfzi^. ^(7)mm^mvi^-ti>. m 

2 3 « . mi commmm tm2 c7)mmmm tizax^x. 

l-:><0 ^n ••/ ixS5aiItO||JBfl0-C* S « 04 

^Lfzmi c^Mumma j; 1^0 2 2 t m 2 comm 

mm<^^tirtHzt5^^X . f M^2 6S:fflV^fc 1 6®C7) 
^{i4g-fo4-^(7)^o>y ^t^^{tTlfi:)tL. lOiO 
>y ^ X- tc>f>f-r S Bf ^fbSyijfMsOfci^tc 4 oco ^' n 

V ^ ^sm b -t^s^u . V ^i'ticommmmiziix^x h m 
«T'S)So L^-L^i)^i^micr>mmmmizt3^^xii. 1 
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FULL CONTENTS 
[Claim(s)] 

[Claim 1] The initial vector used for block encryption processing in the cipher-processing circuit 
which processes block encryption, a processing mean value, or a data storage means to store 
the processing final result. The high-speed cipher-processing circuit characterized by having 
between a function processing means to perform function processing used within block 
encryption processing, and this data storage means and a function processing means, and 
having a mode processing means to perform processing corresponding to the operation mode 
of block encryption. 

[Claim 2] The high-speed cipher-processing circuit according to claim 1 characterized by said 

mode processing means being constituted by the exclusive "or" circuit. 

[Claim 3] Claim 1 characterized by for said block cipher being a DES code and said operation 

mode being CFB mode, or a high-speed cipher-processing circuit given in two. 

[Claim 4] The high-speed cipher-processing circuit according to claim 3 characterized by for 

said function processing means dividing 16 steps of conversion using the nonlinear function as 

said function processing in encryption of the block data to said DES code into multiple times, 

and performing it. 

[Claim 5] The high-speed cipher-processing circuit according to claim 4 characterized by said 
function processing means outputting the execution result at each time except the last 1 time 
of said multiple times to said data storage means. 

[Claim 6] The high-speed cipher-processing circuit according to claim 4 characterized by 
having further an encryption data output means by said function processing means to output 
the encryption block data to input block data using the processing result of the last round of 
said multiple times. 

[Claim 7] While said mode processing means performs mode processing and outputs this 
execution result to this function processing means before execution of the time of the 
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beginning of said multiple times by said function processing means The high-speed cipher- 
processing circuit according to claim 4 characterized by having further a mode processing 
result storing means to store a part of execution result of this mode processing. 
[Claim 8] The high-speed cipher-processing circuit according to claim 7 characterized by this 
function processing means outputting this a part of execution result to this data storage means 
while outputting the data which said mode processing result storing means holds to said data 
storage means at the time of execution of the time of the last of said multiple times by said 
function processing means. 

[Claim 9] Claim 1 characterized by for said block cipher being a DES code and said operation 
mode being the CBC mode, or a high-speed cipher-processing circuit given in two. 
[Claim 10] The high-speed cipher-processing circuit according to claim 9 characterized by for 
said function processing means dividing 16 steps of conversion using the nonlinear function as 
said function processing in encryption of the block data to said DES code into multiple times, 
and performing it. 

[Claim 1 1] The high-speed cipher-processing circuit according to claim 9 characterized by said 
function processing means outputting the execution result of each time of said multiple times to 
said data storage means. 

[Claim 12] Before execution of the time of the beginning of said multiple times by said function 
processing means, mode processing is performed using the block data into which said mode 
processing means is inputted, and the data stored in said storing means. The high-speed 
cipher-processing circuit according to claim 9 characterized by outputting the result of this 
mode processing to this function processing means. 

[Claim 13] The initial vector used for block encryption processing in the cipher-processing 
circuit which processes block encryption, a processing mean value, or a data storage means to 
store the processing final result, A function processing means to perform function processing 
used within block encryption processing. The 1st mode processing means which it has 
between this data storage means and function processing, and performs 1st processing 
corresponding to the operation mode of block encryption. The high-speed cipher-processing 
circuit characterized by having between this function processing means and a data storage 
means, and having the 2nd mode processing means which performs 2nd processing 
corresponding to the operation mode of block encryption. 

[Claim 14] While being at the end time of encryption processing of one block data and 
outputting a processing result in the cipher-processing method of processing block encryption 
A processing mean value [ in / to the register which stored the initial vector / this encryption 
processing ], or ~ storing the processing final result ~ this ~ one block data ~ or ~ this ~ [ the 
operation corresponding to the operation mode of this block encryption / perform and ] 
between the data of a block of the degree following one block, and the data stored in the 
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register this result of an operation -- this - using as a value equivalent to said initial vector in 
the encryption processing to the following block data following one block this - the cipher- 
processing nnethod characterized by performing encryption processing to the following block 
data. 

[Claim 15] It is the cipher-processing method according to claim 14 characterized by for said 
block cipher being a DES code and said operation mode being the CBC mode in CFB mode 
and 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the high-speed cipher-processing circuit which 
performs processing in the CBC mode of the DES code as a still more detailed typical block 
cipher, and CFB mode about the cipher system of digital data. 
[0002] 

[Description of the Prior Art] Encryption processing of digital data attracts attention in recent 
years, and the data which is the target of encryption processing is also increasing. For 
example, the demand of encryption processing of dynamic image data and transaction 
processing in a server has come out, and the encryption processing itself is asked for 
improvement in the speed. 

[0003] There are a block cipher system which performs 64 bits as a cipher system of digital 
data, and enciphers for every block, for example as one block, and a stream cipher system 
which enciphers 1 bit at a time sequentially, for example. 

[0004] The target cipher system [ this invention ] is a block cipher, and is the most typical DES 
code also in it. DES (data encryption standard) is cryptographic algorithm which is the data 
code standard defined by Standards Division, the U.S. Department of Commerce, and is used 
in January, 1977 present most extensively. 

[0005] To the DES code, four modes are defined as the operation mode. The mode is four, 
ECB (electronic code block), CBC (cipher block chaining), CFB (cipher feedback), and OFB 
(output feed back). 

[0006] Since it is two modes, CBC and CFB, it explains that direct relation is in this invention 
among these four modes about processing of the encryption and the decode in these two 
operation modes using drawing 2^^^ - draw[ng 2^^ . 

[0007] Drawi^^^^^ is the basic explanatory view of the encryption and the decode in the CBC 
mode. Although the plaintext sequence Ml divided into 64 bits, M2, M3, and ... are inputted in 
this mode first ~ Ml as 64 bits of the beginning receive, the exclusive OR 51 with the initial 
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vector IV is taken, and encryption processing E52 is performed to the result -- the cipher 
sequence C1, C2, C3, and C1 as 64 bits of the beginning of... It is obtained. E52 as 
encryption processing contains the initial transposition IP, 16 steps of conversion of the sanne 
structure which used f function, exchange of 32 bits of right and left, and reverse transposition 
IP-1 here. 

[0008] M2 as following 64 bits To an input, it is C1 as first 64 bits of a cipher. The exclusive OR 
56 is taken, encryption processing E57 is performed to the result, and it is 02 as 64 bits next to 
a cipher. ******, 64 bits of ciphers are created at a time like the following. 
[0009] In decoding processing, it is 01 as first 64 bits of a cipher. Decoding processing D53 is 
performed to an input. Although this processing contains the initial transposition IP, 16 steps of 
conversion using f function, exchange of 32 bits of right and left, and reverse transposition IP-1 
like the encryption processing E52, unlike encryption processing, in 16 steps of conversion, it 
is used in the sequence that a key sequence is reverse. To the result of the decoding 
processing D53, the exclusive OR 54 with the initial vector IV is taken, and it is Ml as first 64 
bits of a plaintext. It is obtained. 

[0010] 02 as 64 bits next to a cipher After decoding processing D58 was performed to the 
input, it is 01 as first 64 bits of a cipher to the result. The exclusive OR 59 is taken and it is M2 
as 64 bits next to a plaintext. It is obtained. The plaintext as a decoded result is created like the 
following. 

[001 1] Drawing 25 is the basic explanatory view of operation in OFB mode. OFB mode 
performs random-number-generation operation, a plaintext is divided into every k bits which is 
64 or less [ 1 or more ], and the sequence is similarly made into Ml, M2, M3, and ... in drawin g 
24 . 

[0012] Ml as a plaintext, for example, 8 bits of the beginning, Oorresponding to an input, 
encryption processing E67 of the initial vector IV stored in the register 66 is performed. This 
encryption processing itself is the same also in the OBO mode of drawing 24 . only eight of 64 
bits as a result of encryption processing of left-hand side are taken out ~ Ml the exclusive OR 
68 ~ it can take - 8 bit 01 of the beginning of a cipher while being outputted ~ 8 bit 01 as the 
cipher It is stored in the rightmost side of a register 66. That is, it acts as a 8-bit left shift, 8 bits 
of left-hand side are thrown away, and the initial vector IV stored in the register 66 is 01 most 
to right-hand side. It will be stored. 

[0013] The following 8 bit M2 of a plaintext Oorresponding to an input, encryption processing 
E67 to the contents of storing of a register 66 is performed. 8 bits of lefts of the 64 bits of the 
result, and M2 the exclusive OR 68 ~ it can take ~ the following 8 bit 02 of a cipher ****** - 
while being outputted, the 8 bits are stored in the rightmost side of a register 66. That is, it acts 
as a 8-bit left shift, 8 more bits of the initial vector IV are thrown away, and the contents of 
storing of a register 66 are 02 to the rightmost side of a register 66. It will be stored. The 
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following 8 bit C3 of a cipher sequence About the following, same operation is connpletely 
perfornned. 

[0014] In the decoding processing in CFB mode, it is C1 the first 8 bits of a cipher first. 
Corresponding to an input, encryption processing E71 of the initial vector IV stored in the 
register 70 is performed. Unlike the CBC mode of drawing^^^^^^^ , also in decoding processing, 
not the processing D but the processing E is used. 8 bits of lefts are taken out among 64 bits 
as a result of this processing, and it is C1 of a cipher. The exclusive OR 72 is taken and it is 
M1 the first 8 bits of a plaintext. It is outputted. In encryption processing, it acts as a 8-bit left 
shift of the contents of the register 70 similarly simultaneously with it, and a cipher is C1 8 bits 
most to right-hand side. It is stored. 

[0015] The following 8 bit C2 of a cipher sequence The processing corresponding to an input is 
completely the same. That is, encryption processing E71 is performed to the contents of the 
register 70, and it is 8 bits of lefts in 64 bits of the result, and C2. The exclusive OR 72 is taken 
and the degree of a plaintext is M2 8 bits, while being obtained As for the contents of the 
register 70, it acts as a 8-bit left shift, and a cipher is C2 8 bits. It is stored in the rightmost side 
of a register 70. The cipher sequence C3 and decoding processing of ... are performed like the 
following. 

[0016] Drawing 26 is the conventional parallel of the cipher-processing circuit in the CBC 
mode. This figure (a) An enciphering circuit is shown. When it can set to drawing 24 in this 
figure, it is Ml the first 8 bits of a plaintext similarly. If inputted, an exclusive OR with the initial 
vector IV stored in the register 75 will be taken by the EXOR circuit 76, and the result will be 
inputted into the f function 77. 

[001 7] [ in order to perform all of 1 6 steps of conversion using f function as an f function 77, 
may have 16 steps of conversion circuits but ] in order to reduce the amount of hardware, for 
example 16 steps of conversion is also realizable by having four steps of conversion circuits 
and carrying out the loop of the intermediate result of processing 4 times through a register 75 
and the EXOR circuit 76. In this case, the contents of storing of a register 75 can be outputted 
to the f function 77 as it is between processings of that loop by setting 64 bits of values of the 
input to the EXOR circuit 76 to "0" as opposed to all. 

[0018] In addition, [ since it was easy here, only the f function 77 was shown, but ] The initial 
transposition IP included in the encryption processing E52 of drawing 24 can be considered 
that it shall be contained in processing of f function of the 1st step, and exchange of 32 bits of 
the last right and left and reverse transposition IP-1 are contained in the 16th step of 
processing of f function. 

[0019] And 64 bits which it is at the end time of the 4th loop, is outputted from the f function 77, 
and is stored in a register 75 are the block CI of the beginning of a cipher. While being 
outputted by carrying out, it is the block M2 next to an input plaintext. It is M2 at the input time. 
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It is used in order to take an exclusive OR. Since the following processings are the same as 
the explanation to drawing 24 , the explanation is omitted. 

[0020] Drawing 26 (b) It is the conventional parallel of the CBC decoder circuit. In this figure, it 
is the block 01 of the beginning of a cipher. An input will give the input to the f function 81 
through a selector 80. 

[0021] This f function 81 is for performing decoding processing D53 in drawing 24 , and is (a), 
if it shall have four steps of conversion circuits similarly It is the input cipher block 01 after the 
end of four operation through a register 82 and a selector 80 of a loop. A decoded result will be 
outputted to a register 82, and conversion of 32 bits of right and left and reverse transposition 
IP-1 shall be included in the initial transposition IP and the 16th step of conversion at the 1st- 
step conversion. 

[0022] Block 01 of the beginning of the cipher stored in the register 82 It is inputted into the 
EXOR circuit 84, an exclusive OR with the initial vector IV stored in the register 83 is taken, 
and a decoded result is the block Ml of the beginning of a plaintext. It is outputted by carrying 
out. At this time, it is the next block 02. In order to take a decoded result and an exclusive OR, 
it is the block 01 of the beginning of an input cipher. It is stored in a register 83. Block 02 next 
to a cipher Since decoding processing to an input is similarly performed in drawing 24 , the 
explanation is omitted below. 

[0023] Drawing 27 is the conventional parallel of the cipher-processing circuit in OFB mode. 
This figure (a) An enciphering circuit and (b) A decoder circuit is shown. Drawing 27 (a) It sets 
and is M1 the first 8 bits of a plaintext. Oorresponding to an input, the value of the initial vector 
IV first stored in the register 86 is outputted to the f function 87. 

[0024] The f function 87 performs the encryption processing E67 E52 in drawing 25 , i.e., the 
encryption processing in drawing 24 , and same processing, and it has four steps of 
conversion circuits similarly in drawing 26 . 16 steps of conversion by four processings through 
a selector 90 and a register 86 of a loop ([ and ] in drawing 26 similarly the first stage) 8 bits of 
lefts are outputted to the EXOR circuit 91 among 64 bits as a processing result including 
exchange of 32 bits of right and left, and reverse transposition -- 8 bit Ml of an input plaintext 
an exclusive OR -- it can take -- block 01 of the beginning of a cipher ****** - it is outputted. 
[0025] As mentioned above, the initial vector IV stored in the register 86 is Ml. Although 
outputted to the f function 87 corresponding to an input, at this time, it is shifted to the 8-bit left, 
namely, left 8 bits are thrown away, and those contents are stored in a register 88. The 
number of bits is 56 bits. Only 8 bits of most left-hand side of the output after the 4th loop of 
the f function 87 are inputted into the EXOR circuit 89. Input Ml An exclusive OR is taken and 
8 bits of the result are stored most in right-hand side as 64-bit data through a selector 90 at a 
register 86 in form that 56 bits stored in the register 88 are arranged on left-hand side. These 
64 bits will be outputted to the encryption processing E67 of drawing 2^^ corresponding to the 
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input of the next block M2 of a plaintext. M2 Since operation to the following blocks is the 
sanne, the following explanation is omitted. 

[0026] Drawing 27 (b) It sets and is C1 the first 8 bits of a cipher, at the input tinne The initial 
vector IV stored in the register 93 is given to the f function 94. Conversion using 16 steps off 
functions etc. is performed by four processings of a loop which mind a selector 95 and a 
register 93 like the above-mentioned. 8 bits of lefts are outputted to the EXOR circuit 97 
among 64 bits as an output of the encryption processing E71 of drawing 25 , and it is the input 
cipher block C1. An exclusive OR is taken and it is a plaintext M1. It is outputted. 
[0027] When the value of the initial vector IV as contents of the register 93 is outputted to the f 
function 94, simultaneously, it acts as a 8-bit left shift of the contents, and 56 bits is stored in a 
register 96. And it is at the end time of the 4th loop, and, in left-hand side and 8 bits of input 
ciphers, the 56 bits are C1. In the form arranged on right-hand side, 64-bit data is stored in a 
register 93 through a selector 95. This data is given to the f function 94 corresponding to the 
input of the next cipher block C2. Cipher block C2 Since it is the same about the decoding 
processing to the following, the explanation is omitted. 
[0028] 

[Problem to be solved by the invention] In order to accelerate such DBS encryption processing, 
it aims at the improvement in the speed of 16 steps of transform processing which used f 
function especially conventionally, the conversion circuit of f function -- as much as possible -- 
a number of stages -- [ it connects mostly, and / loop loss is reduced or ] The procedure of the 
conversion containing f function was changed and the method of reducing the delay to 1 time 
of a loop, or having put in, for example in the CBC encryption processing into the processing 
cycle of encryption of the mode processing corresponding to the operation mode, i.e., a loop, 
and reducing the number of clocks required for processing was used. It is indicated by the 
following United States patent about these methods. 

[0029] U.S. the conversion using Patent 5, 381, and 480, Butter et al. "System for Translating 
Encrypted Data", however f function -- as much as possible -- a number of stages -- though it 
connects mostly The more it increased the number of stages, the more the amount of 
hardware increased, and since cost became large, there was a problem that a number of 
stages could also seldom be increased. 

[0030] Next, as the operation mode of a DES block cipher, the four operation modes, ECB, 
CBC, CFB, and OFB, exist as mentioned above. ECB mode only combines DES encryption 
processing and decoding processing, and the special mode processing circuit for the operation 
mode is unnecessary. In OFB mode, within the processing loop of DES encryption Processing 
to the next block can be performed as it is using the processing result of a pre- block, and it is 
not necessary to take [ as special processing corresponding to a mode ] generating of delay 
into consideration to a processing loop that what is necessary is just to take an exclusive OR 
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between the final disposal result of DES, and input block data. 

[0031] On the other hand, it is necessary to take the exclusive OR of the value of the initial 
vector IV, and input block, for example, and to perform DES processing to this value in the 
CBG mode. Moreover, it is necessary to perform the left shift of the value of an initial vector at 
the time of the renewal of contents of the register which stored the initial vector IV in encryption 
processing, and to set the value of an exclusive OR with a part of processing result of DES 
processing, and input block to right-hand side in CFB mode. 

[0032] That is, the mode processing to CBG is the beginning of DES processing, and there is a 
difference that mode processing to CFB is performed at the last. These the processings of 
both are included in the loop of DES processing. 

[0033] Although it was desirable to constitute the circuit which can perform all these four 
operation modes as a processing circuit which processes DES encryption, there was a 
problem that it was difficult to constitute the processing circuit especially used common to the 
CBG mode and GFB mode in the former. This originates in the mode processing 
corresponding to these two modes being [ one side / another side ] contained at the end at the 
beginning of the processing loop of DES processing. 

[0034] Especially this invention aims at offering the cipher-processing circuit which can perform 
both the GBG mode and GFB mode, and reducing the processing delay in the circuit as much 
as possible. 
[0035] 

[Means for solving problem] Drawing 1 is a principle configuration block figure corresponding 
to the 1 st embodiment of this invention. This figure is a configuration block figure of a high- 
speed cipher-processing circuit which can perform DES encryption processing in both the GBG 
mode and GFB mode, for example as the operation mode and which processes block 
encryption. 

[0036] In drawing 1 , the data storage means 1 stores the initial vector used for block 
encryption processing, a processing mean value, or the processing final result, and is a 
register. 

[0037] The function processing means 2 performs two or more steps of conversion using f 
function as function processing used within block encryption processing, for example, DES 
processing. It has the mode processing means 3 between the data storage means 1 and the 
function processing means 2, and it performs processing corresponding to the operation mode, 
for example, the GBG mode, or GFB mode of block encryption using the data stored in the 
data storage means 1. 

[0038] In processing in GFB mode, 16 steps of conversion using the nonlinear function as the 
above-mentioned function processing in the input-block data encryption to a DES code is 
performed in a step, for example, 4 times, by the function processing means 2. In that case, in 
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one function processing, four steps of conversion using a nonlinear function is performed. 
[0039] The execution result at each tinne except the last 1 time of processing of these multiple 
times is stored in the data storage means 1 by the function processing means 2. And since the 
encryption block data to input block data is outputted using 1 time of this last processing result, 
it has an encryption data output means further 

[0040] Moreover, while mode processing is performed and that execution result is outputted to 
the function processing means 2 by the mode processing means 3 before execution of the 
time of the beginning of processing of these multiple times, it has further a mode processing 
result storing means by which a part of execution result of mode processing is stored. And 
while a part of execution result of the above-mentioned mode processing is outputted to the 
data storage means 1 by the mode processing result storing means at the time of execution of 
the time of the last of processing of the multiple times by the function processing means 2, a 
part of execution result is outputted to the data storage means 1 by the function processing 
means 2. 

[0041] In the time of execution of encryption processing in the CBC mode, in CFB mode, 
similarly, 16 steps of conversion using the nonlinear function as function processing in 
encryption of the block data to the above-mentioned DES code divides into multiple times, and 
is performed. And the execution result of each time of processing of these multiple times is 
stored in the data storage means 1 by the function processing means 2. 
[0042] Moreover, before execution of the time of the beginning of processing of the multiple 
times by the function processing means 2, mode processing using the block data inputted by 
the mode processing means 3 and the data stored in the data storage means is performed, 
and the result of the mode processing is outputted to the function processing means 2. 
[0043] Drawing 2 is a principle configuration block figure corresponding to the 2nd embodiment 
of this invention. In addition to the 1st mode processing means 4 corresponding to the mode 
processing means 3 of drawing 1 , in this figure, it has between the function processing means 
2 and the data storage means 1, and the 2nd mode processing means 5 which performs 2nd 
processing corresponding to the operation mode of block encryption is added. 
[0044] In the 2nd embodiment of this invention although the cipher-processing circuit can 
perform the operation mode in both CFB mode and the CBC mode similarly in the 1st 
embodiment Fundamental mode processing in CFB mode is performed by the 2nd mode 
processing means 5 to the 1st mode processing means 4 performing the fundamental portion 
of the mode processing in the CBC mode. 

[0045] [ conversion ] in CFB mode although it divides into multiple times similarly and 16 steps 
of conversion using the nonlinear function by the function processing means 2 is performed 
also in the 1st embodiment The data stored in the data storage means 1 in the first time is 
given to the function processing means 2 as it is, without performing special processing by the 
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1st mode processing means 3. The processing result at each time except the time of the last of 
processing of the multiple times by the function processing means 2 is stored in the data 
storage means 1. 

[0046] While the encryption block data to input block data is similarly outputted in the 1st 
embodiment using the processing result of the last round by the function processing means 2 
By the 2nd mode processing means, it is performed by the 2nd mode processing using the 
part and input data block of the processing result, and The result, Before execution of the time 
of the beginning of multiple times, some data stored in the data storage means 1 is stored in 
the data storage means 1, and it is used for encryption processing of the following block data. 
[0047] In the CBC mode, according to the mode processing means 3 against the 1st 
embodiment, same processing is performed by the 1st mode processing means 4, and also in 
the 1st embodiment, same processing is performed as a result, without the 2nd mode 
processing means performing any operation substantially. 

[0048] While being at the end time of encryption processing of one block data and outputting a 
processing result in the cipher-processing method of processing DES block encryption, for 
example, in the cipher-processing method of this invention The processing mean value in the 
encryption processing or the processing final result is stored in the register in which the initial 
vector was stored. 

[0049] And the operation corresponding to the operation mode of the block encryption is 
performed between the data stored in the register, its one block data, or the following block 
data following the one block. Furthermore, the result of an operation is used as a value 
equivalent to the initial vector in the encryption processing to the following block data following 
the one block, and encryption processing to the following block data is performed. 
[0050] In the encryption processing method of this invention, the initial vector is first stored in 
the above-mentioned register. After the operation corresponding to the operation mode is first 
performed between input block data in the CBC mode as opposed to the initial vector In CFB 
mode, without performing substantially, corresponding to the result of an operation, 16 steps of 
conversion using a nonlinear function divides the special operation corresponding to the 
operation mode into multiple times, and it is performed. The method of this encryption 
processing is used in the 1st above-mentioned embodiment. 

[0051] As explained above, according to this invention, the cipher-processing circuit which 
performs both the CBC mode and CFB mode is realizable. Moreover, it becomes possible to 
communalize the mode processing means corresponding to two modes in the 1st embodiment. 

[0052] 

[Mode for carrying out the invention] Drawing 3 shows the composition of the enciphering 
circuit in the CFB mode used in the 1st embodiment of this invention. This figure is dravvjn£2^^^ 
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(a). It is drawing 27 (a) in order to use it combining the enciphering circuit in the CBC mode, 
although it corresponds to the shown conventional parallel. The EXOR circuit 89 set and used 
is omitted, instead the EXOR circuit 12 is used for the output side of the register 11. 
[0053] The initial vector IV is stored in the register 1 1 in drawing 3 . 8 bit Ml of the beginning of 
a plaintext At the input time, the value of the initial vector IV is given to the f function 
(processing circuit) 13 from a register 1 1. At this time, the value of the initial vector IV stored in 
the register 1 1 is given to the f function 13 from a register 14 as it is by outputting "0", for 
example to the EXOR circuit 12. 

[0054] The f function 13 is drawing 27 (a). If it can set, it will consist of a conversion circuit 
using four steps of f functions similarly, and 16 steps of conversion using f function shall be 
performed by four processings through a selector 15 and a register 1 1 of a loop. Moreover, the 
initial transposition IP, exchange of 32 bits of right and left to the result of the 16th step, and 
reverse transposition IP-1 shall be included as mentioned above. 

[0055] 8 bits of lefts are given to the EXOR circuit 18 among the outputs of the f function 13 
after 4 times of loops, and it is the input plaintext block Ml. An exclusive OR is taken and it is 
the first cipher block 01. It is outputted by carrying out. 

[0056] Block Ml [ 56 bits of left-hand side ] among the contents although 8 bits of right-hand 
side is outputted to the register 17 side from a register 1 1 as it is in the form given through the 
EXOR circuit 12 when the initial vector IV is outputted from a register 1 1 corresponding to an 
input The 64 bits are stored in a register 17, after 8 bit shifts are carried out and 8 bits of most 
left-hand side are thrown away. And 64-bit data is stored in a register 1 1 through a selector 15 
in form that are at the end time of 4 times of loops, and 56 bits of the contents are stored in 
left-hand side, and 8 bits of lefts of the outputs of the f function 13 are stored in right-hand side. 
Moreover, input-block M1 8 bit is stored in a register 14 at this time. 64 bits stored in the 
register 1 1 here are the following input block M2, if it remains as it is. It cannot use as an 
object of DES encryption processing to the f function 13 at the input time. 
[0057] Block M2 At the input time, 8 bits of right-hand side is outputted to the EXOR circuit 12 
among the contents of storing of a register 1 1 . An exclusive OR with 8 bits of the first block Ml 
stored in the register 14 is taken, and it is inputted into the f function 13 with 56 bits of left-hand 
side outputted as it is from a register 1 1 . 8 bit shifts are carried out to the left like the above- 
mentioned, and 56 bits of 64 bits [ which becomes an input to the f function 1 3 substantially at 
this time ] are stored in a register 17. This is the next block M3. It is for the data origination to 
the f function 1 3 at the input time. 

[0058] It is at the end time of 4 times of the loops through the f function 1 3, a selector 1 5, and a 
register 1 1 , the exclusive OR of 8 bits of lefts and input M2 8 bit is taken by the EXOR circuit 
1 8 among the outputs of the f function 1 3, and it is the block 02 next to a cipher sequence. It is 
outputted by carrying out. The contents of storing of a register 14 shall not be outputted 
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between this four loop processing, but "0" shall be given to the EXOR circuit 12. Since the 
sanne processing as the following is performed, the explanation is omitted. 
[0059] Drawing 4 is the configuration block figure of the cipher-processing circuit as the 1st 
embodiment of this invention. This figure is a configuration block figure of the cipher- 
processing circuit which performs processing in the mode in both CFB mode and the CBC 
mode. CFB mode encryption operation using this circuit is explained using drawing 5 - drawing 
9 . 

[0060] Drawing 5 is the explanatory view of CFB mode encryption operation (the 1). The 
dashed line has shown the portion which is a solid line and is not used about the connection 
portion of the circuit used here. It is the first plaintext block Ml first. The initial vector IV stored 
in the register 21 corresponding to the input (from **) gives the f function 26 through selectors 

22 and 23 and the EXOR circuits 24 and 25, and it is At this time, selectors 22 and 23 
choose the output from a register 21 , and the data (56 bits and 8 bits) of "0" is inputted through 
selectors 31 and 32 to the EXOR circuits 24 and 25. For this reason, the value of the initial 
vector IV stored in the register 21 is given to the f function 26 as it is. Moreover, 8 bit shifts of 
the value of IV stored in the register 21 are only carried out, and it is substantially stored in a 
register 28 as it is. And the processing result of four steps of conversion circuits contained in 
the f function 26 is stored in a register 21 through a selector 27. 

[0061] Drawing 6 is the explanatory view of CFB mode encryption operation (the 2). This figure 
is an explanatory view of processing operation in the 2nd time and the 3rd loop among 4 times 
of the loops through the f function 26, a selector 27, and a register 21. Since selectors 22 and 

23 choose the output from a register 21 in these loops and selectors 31 and 32 are outputting 
"0" and "0" to the EXOR circuits 24 and 25, respectively, [ 56 bits ] [ 8-bit ] The data of a 
register 21 is given to the f function 26 as it is, and four steps of processing results are stored 
in a register 21 through a selector 27. 

[0062] Drawing 7 is the explanatory view of CFB mode encryption operation (the 3). In this 
figure, the processing result of the 3rd loop stored in the register 21 is given to the f function 26 
as it is through selectors 22 and 23 and the EXOR circuits 24 and 25 like the above- 
mentioned. Since the output of the f function 26 is the encryption processing result of the initial 
vector IV which used 16 steps of f functions. Block Ml of the beginning of the plaintext which 8 
bits of the left is taken out and given to input ** An OR with 8 bits is taken by the EXOR circuit 
30, and it is the block CI of the beginning of a cipher. It carries out and is outputted from 
output **. Moreover, plaintext block Ml 8 bits is stored in a register 33. 
[0063] 64-bit data is stored in a register 21 through a selector 27 in form that 56 bits 
simultaneously stored in the register 28 are stored in left-hand side, and 8 bits of lefts are 
stored in right-hand side among the outputs of the f function 26. 

[0064] Drawin^^^^^ is the explanatory view of CFB mode encryption operation (the 4). Plaintext 
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block M2 of an input [ here ] The first processing in which it corresponds is performed. The 64- 
bit data first stored in the register 21 by (the 3) is given to two EXOR circuits 24 and 25 through 
selectors 22 and 23, At this time, a selector 31 is the block Ml of the beginning of the data with 
which 32 is stored in the register 33 in "0", i.e., an input plaintext, although data is outputted 
and the EXOR circuit 24 outputs 56 bits of left-hand side to the f function 26 as it is among 64 
bits [ 56-bit ] A circuit 25 will output 8 bits of right-hand side, and an Ml 8 bit exclusive OR, and 
64 bits of the result are block M2. It is given to the f function 26 at the beginning of four 
processings of a loop corresponding to an input. Moreover, substantially, 8 bit shifts of this 
input are carried out, and it is stored in a register 28. And the result of four steps of transform 
processing (initial transposition is included) in the f function 26 is stored in a register 21 
through a selector 27. 

[0065] Drawing^Q is the timing chart of CFB mode encryption operation, encryption **** which 
explained the number over a flow of operation by drawing 5 - drawing 8 ~ the 1- it is a number 
corresponding to the 4. Block M1 of the beginning of a plaintext To an input, corresponding to 
four clocks, processing of the 1, its 2, and the 2 and its 3 is performed, and it is the block 01 of 
the beginning of an output. It is obtained. The following input block M2 To the following, 
corresponding to four clocks, processing of the 4, its 2, and the 2 and its 3 is performed, and it 
is the output block 02. The following is obtained. In addition, cipher block 01 As drawing 7 
explained, they are the output of the f function 26, and the plaintext block Ml to the last of the 
4th loop. Although a short-time output is carried out as a result of an exclusive OR, the output 
period is shown in the figure by about 1 clock. If a latch circuit is prepared before output 
terminal **, it is also possible to extend this period before the next cipher block output. 
[0066] Drawing 10 is the explanatory view of OFB mode decode operation (the 1). In this 
figure, it is the block 01 of the beginning of a cipher. The value of the initial vector IV stored in 
the register 21 corresponding to the input is given to the f function 26 as it is through selectors 
22 and 23 and the EXOR circuits 24 and 25. Moreover, the initial vector IV is stored in a 
register 28 only by acting as a 8-bit left shift. And the result is stored in a register 21 through a 
selector 27 after the end of four steps of processings by f function including initial transposition. 

[0067] Drawing 1 1 is the explanatory view of OFB mode decode operation (the 2). This figure 
is an explanatory view of processing operation of the 2nd loop of 4 times of the loops as 
processing which use f function, and the 3rd loop. The 64-bit data stored in the register 21 is 
given to the f function 26 through selectors 22 and 23 and the EXOR circuits 24 and 25, and 
the output of the f function 26 is stored in a register 21 through a selector 27. 
[0068] Drawing 12 is the explanatory view of OFB mode decode operation (the 3). This figure 
shows processing operation of the 4th loop which uses f function. The 64-bit data stored in the 
register 21 is given to the f function 26 through selectors 22 and 23 and the EXOR circuits 24 
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and 25. Four steps of conversion and the exchange of 32 bits of right and left, and reverse 
transposition IP-1 after processing [ using f function ] The first cipher block C1 which 8 bits of 
lefts are given to the EXOR circuit 30 among 64 bits as the processing result, and is inputted 
from input ** An exclusive OR with 8 bits is taken and the result is the block M1 of the 
beginning of a plaintext from output **. It is outputted by carrying out. Moreover, to left-hand 
side, 56 bits simultaneously stored in the register 28 are the input cipher block 01, In the form 
arranged on right-hand side, 8 bits is stored in a register 21 as 64-bit data through a selector 
27. 

[0069] Drawing 13 is the timing chart of CFB mode decode operation, the number in a flow of 
operation -- the 1- as drawing 10 - drawing 12 -- the processing of 3 is shown. Block 01 of the 
beginning of an input cipher To an input, in four clocks, processing of the 1, its 2, and the 2 
and its 3 is performed, and it is the block Ml of the beginning of an output plaintext. It is 
outputted. The next input cipher block 02 Same operation is completely performed also to the 
following inputs. 

[0070] Drawing 14 is the explanatory view of the OBO mode encryption operation (the 1). In 
the OBO mode, an input plaintext block is inputted from input and an output cipher block is 
outputted from output **. Before long, 56 bits of lefts are given to a selector 31, and, as for the 
plaintext block Ml 64 bit of the beginning first inputted from input 8 bits of rights are given to 
32. And as for a selector 31 , the 56 bits are given to the EXOR circuit 24, and 32 gives 8 bits to 
25. 

[0071] The EXOR circuits 24 and 25 are given through selectors 22 and 23, and the initial 
vector IV stored in the register 21 on the other hand is the plaintext input block Ml of the initial 
vector IV and the beginning. An exclusive OR is taken and the result is given to the f function 
26. And the result of the conversion using four steps of f functions including the initial 
transposition IP is stored in a register 21 through a selector 27. 

[0072] Drawing 15 is the explanatory view of the OBO mode encryption operation (the 2). This 
figure is an explanatory view of operation in the 2nd time and the 3rd loop among 4 times of 
the loops which use f function. The 64-bit data stored in the register 21 is given to two EXOR 
circuits 24 and 25 through selectors 22 and 23. Since selectors 31 and 32 are outputting "0" 
and "0", respectively at this time, that 64-bit data is given to the f function 26 as it is. [ 56 bits ] 
[ 8-bit ] And the result of four steps of transform processing using f function is stored in a 
register 21 through a selector 27. 

[0073] Drawing 16 is the explanatory view of the OBO mode encryption operation (the 3). This 
figure illustrates operation of the 4th loop which uses f function. The 64-bit data stored in the 
register 21 is given to the f function 26 as it is through selectors 22 and 23 and the EXOR 
circuits 24 and 25 like the above-mentioned. Four steps of conversion and the exchange of 32 
bits of right and left using f function, and the processing result of reverse transposition IP-1 are 
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stored in a register 21 through a selector 27. the 64-bit data stored in the register 21 minds the 
EXOR circuit 34 -- as it is -- block CI of the beginning of output ** to an output cipher ****** - 
**** „ last ** At this time, the selector 35 is outputting "0" to the EXOR circuit 34. [ 64-bit ] 
Moreover, block 01 of the beginning of the output cipher stored in the register 21 The next 
plaintext block M2 It is the input block M2 by encryption operation (the 1) at the input time. An 
exclusive OR will be taken like the above-mentioned. 

[0074] Drawing 17 is the timing chart of the OBO mode encryption operation. Input plaintext 
block Ml Corresponding to an input, in four clocks, operation of the 1, its 2, and the 2 and its 3 
is performed, and it is the block 01 of the beginning of an output cipher. It is outputted. 
Plaintext block M2 Operation to the following inputs is completely the same. 
[0075] Draw^^^^ is the explanatory view of the OBO mode decode operation (the 1). The 
initial vector IV is stored in the register 37 in the OBO mode decode operation. The first cipher 
block 01 If inputted from input at a selector 31, by 56 bits of the left-hand side, and 32, 8 
bits of right-hand side will be chosen, and two EXOR circuits 24 and 25 will be given. At this 
time, both the selectors 22 and 23 are outputting "0" and "0", and, for this reason, are the input 
cipher blocks 01. 64 bits is given to the f function 26 as they are. [ 56 bits ] [ 8-bit ] And four 
steps of processing results using f function including the initial transposition IP are stored in a 
register 21 through a selector 27. 

[0076] Drawing 19 is the explanatory view of the OBO mode decode operation (the 2). This 
figure is an explanatory view of operation in the 2nd time and the 3rd loop among 4 times of 
the loops which use f function. The 64-bit data stored in the register 21 in this figure is given to 
the f function 26 as it is through selectors 22 and 23 and the EXOR circuits 24 and 25, and the 
processing result of four steps of conversion using f function is stored in a register 21 through 
a selector 27. Moreover, the initial vector IV stored in the register 37 is stored in a register 36 
at the time of processing of the 3rd loop (the 2nd time is sufficient). 

[0077] Drawing 20 is the explanatory view of the OBO mode decode operation (the 3). The 64- 
bit data stored in the register 21 as 4th loop in this figure is given to the f function 26 as it is, 
and four steps of conversion and the exchange of 32 bits of right and left using f function, and 
the processing result of reverse transposition IP-1 are given to a register 21 through a selector 
27. The EXOR circuit 34 is given, an exclusive OR with the initial vector IV stored in the 
register 36 is taken, and the 64-bit data stored in the register 21 is the block Ml of the 
beginning of an output plaintext from output **. It is outputted by carrying out. Moreover, it is 
the next cipher block 02 at this time. As data for outputting to the EXOR circuit 34 in operation 
receiving (that 3), it is the block 01 of the beginning of an input cipher. It is stored in a register 
37. 

[0078] Drawing 21 is the timing chart of the OBO mode decode operation. In this figure, it is the 
block 01 of the beginning of a cipher. To an input, in four clocks, operation of the 1, its 2, and 
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the 2 and its 3 is performed, and it is the block M1 of the beginning of a plaintext. It is 
outputted. Operation to the input of next block 02 ... of a cipher is completely the same below. 
[0079] Drawing 22 is the configuration block figure of the cipher-processing circuit which 
performs two operation, the OFB mode as the 2nd embodiment of this invention, and the OBO 
mode. [ in order that two EXOR circuits 24 and 25 might take the exclusive OR to 8 bits of left- 
hand side also in encryption operation in not only the OBO mode but OFB mode in the 1st 
embodiment of drawing 4 among the 64-bit data which should be given to the f function 26, 
were used, but ] In drawing 22 , there is a difference with this exclusive OR fundamental to the 
point taken by the EXOR circuit 45. For this reason, in the EXOR circuits 24 and 25, as for the 
selectors 22 and 23 of drawing 4 , one selector 41 is realized, and one EXOR circuit 42 and 
selectors 31 and 32 are realized by one selector 43. 

[0080] Since OFB mode encryption operation has fundamentally the difference with the 2nd 
embodiment of drawing 22 , and the 1st embodiment of drawing 4 , it explains drawing 22 
focusing on the operation. In drawing 22 , the initial vector IV stored in the register 21 
corresponding to the above-mentioned OFB mode encryption operation (the 1) is given to the f 
function 26 as it is through a selector 41 and the EXOR circuit 42, and the processing result is 
stored in a register 21 through a selector 46. Operation in encryption operation (the 2) is also 
the same. 

[0081] The first plaintext block Ml into which it is equivalent to encryption operation (the 3), 
and 8 bits of lefts are inputted from input among the outputs of the f function 26 as 4th loop 
An exclusive OR is taken by the EXOR circuit 30 and it is outputted as the first cipher block 01 
from output **. [ 56 bits simultaneously stored in the register 44 / left-hand side / moreover, 
form that the result by which the exclusive OR of 8 bits of lefts and input-block Ml 8 bit was 
taken by the EXOR circuit 45 is arranged at right-hand side ] among the outputs of the f 
function 26 64-bit data is stored in a register 21 through a selector 46. An exclusive OR with an 
input is already taken among the data stored in this register 21 , and 8 bits of rights are the next 
plaintext blocks M2. Corresponding to an input, it will be given to the f function 26 as it is 
through a selector 41 and the EXOR circuit 42. 

[0082] Also in the 1st embodiment, since it is substantially the same, operation of OFB mode 
decode, the CBC mode encryption, and the CBC mode decode omits the explanation. Drawing 
23 is the explanatory view of the processing included in one clock in the 1st embodiment and 
2nd embodiment. In each of the 2nd embodiment shown in the 1st embodiment and drawing 
22 which were shown in drawing 4 The point which 1 6 steps of conversion using the f function 
26 is performed by dividing into every four-step four clocks, and needs four clocks for the 
encryption processing to one block data is the same also in which embodiment. However, in 
the 1st embodiment, it becomes short, it becomes possible to gather the speed of a clock as a 
result, and encryption processing can be accelerated rather than the sum total of the time 
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delay of the processing performed within one clock can set to the 2nd embodiment. 
[0083] In the 1st loop including the 1-4th step of conversion by f function of drawing 23 Delay 
according to the output from a register 21 at drawing 4 corresponding to the 1st embodiment of 
the lower berth, In addition to the delay of conversion (initial transposition is included) using 
delay by selectors 22 and 23, delay of processing by the EXOR circuits 24 and 25, and four 
steps of f functions, and delay by a selector 27, delay by the setup of the data in a register 21 
will be included in one clock. 

[0084] In the circuit of drawing 22 corresponding to the 2nd embodiment of an upper case to it 
Delay by the EXOR circuit 45, delay by a selector 27, and delay by the data setup of a register 
21 are included after delay of the data output by a register 21 , delay by a selector 41 , delay by 
the EXOR circuit 42, and delay by four steps of conversion using f function. That is, compared 
with the 1st embodiment, delay by the EXOR circuit 45 is included too many, in the 2nd 
embodiment, compared with the 1st embodiment, only the part becomes long and the cycle of 
a clock will be inferior to the 1st embodiment in it in respect of improvement in the speed. 
However, if this point is removed, the cipher-processing circuit which performs the operation 
mode in both CFB mode and the CBC mode also in the 2nd embodiment will be realized. 
[0085] 

[Effect of the Invention] As explained to details above, according to this invention, it becomes 
possible to realize the cipher-processing circuit which can perform the operation mode in both 
the CBC mode of a DES code, and CFB mode. Moreover, by moving the mode processing in 
CFB mode to the beginning of processing to the following block data in the 1st embodiment It 
becomes possible to use the portion which performs processing in the CBC mode, and a 
common portion, and the maximum delay of a processing loop can be shortened and high 
speed processing becomes possible. Moreover, the place which the reduction of the circuits of 
an exclusive OR of is also attained simultaneously, can decrease in number the amount of 
hardware, and contributes to the improvement in practicality of a cipher-processing method is 
large. 



[Brief Description of the Drawings] 

[Drawing 1] It is a principle configuration block figure corresponding to the 1st embodiment. 
[Drawing 2] It is a principle configuration block figure corresponding to the 2nd embodiment. 
[Draw^^ It is the block diagram showing the composition of the CFB mode enciphering 
circuit used in the 1st embodiment of this invention. 

[Drawing 4] It is the block diagram showing the composition of the cipher-processing circuit as 
the 1st embodiment of this invention. 
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[Drawing 5] It is the explanatory view of CFB mode encryption operation (the 1) in the 1st 
ennbodinnent. 

[Drawing 6] It is the explanatory view of CFB mode encryption operation (the 2) in the 1st 
embodiment. 

[Dmmng J} It is the explanatory view of CFB mode encryption operation (the 3) in the 1st 
embodiment. 

[Drawing 8] It is the explanatory view of CFB mode encryption operation (the 4) in the 1st 
embodiment. 

[Drawing 9] It is the timing chart of CFB mode encryption operation. 

[Drawing 10] It is the explanatory view of CFB mode decode operation (the 1) in the 1st 

embodiment. 

[Drawin^^^^^^ It is the explanatory view of CFB mode decode operation (the 2) in the 1st 
embodiment. 

[Drawing 12] It is the explanatory view of CFB mode decode operation (the 3) in the 1st 
embodiment. 

[Drawing 13] It is the timing chart of CFB mode decode operation. 

[ Drawing 14] It is the explanatory view of the CBC mode encryption operation (the 1) in the 1st 
embodiment. 

{Drawjng^^^^^ It is the explanatory view of the CBC mode encryption operation (the 2) in the 1st 
embodiment. 

[Drawing 16] It is the explanatory view of the CBC mode encryption operation (the 3) in the 1st 
embodiment. 

[Drawing 17] It is the timing chart of the CBC mode encryption operation. 

{Drawl ng^^^^^^^^^ It is the explanatory view of the CBC mode decode operation (the 1) in the 1st 

embodiment. 

[Drawing 1^^^^^ It is the explanatory view of the CBC mode decode operation (the 2) in the 1st 
embodiment. 

[Drawing 20] It is the explanatory view of the CBC mode decode operation (the 3) in the 1st 
embodiment. 

[Drawing 21] It is the timing chart of the CBC mode decode operation. 

[Dra\A/jng 22] It is the block diagram showing the composition of the cipher-processing circuit 

as the 2nd embodiment of this invention. 

[Drawing 23] It is the figure showing comparison of the processing performed within one clock 
in the 1st embodiment and 2nd embodiment. 

[Drawing 24] It is the basic explanatory view of the encryption processing in the CBC mode. 
{Drawing 25] It is the basic explanatory view of encryption processing in CFB mode. 
[Dravying 2^^^^ It is the figure showing the conventional parallel of the cipher-processing circuit in 
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the CBC mode. 

[Drawing 27] It is the figure showing the conventional parallel of the cipher-processing circuit in 
CFB nnode. 

[Explanations of letters or numerals] 

1 Data Storage Means 

2 Function Processing Means 

3 Mode Processing Means 

4 1st Mode Processing Means 

5 2nd Mode Processing Means 
21,28, 33, 36, 37, 44 Register 

22, 23, 27, 31, 32, 35, 41, 46 Selector 
24, 25, 30, 34, 42, 45 EXOR circuit 
26 F Function (Processing Circuit) 



[Drawing 1] 



[Drawing 2] 
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[Drawing 5] 
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[Drawing 6] 
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[Drawing 7] 
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[Drawing 13] 




[Drawing 17] 




[Drawing 8] 
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[Drawing 24] 
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[Drawing 12] 
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[Drawing 14] 
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[Drawing 15] 
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[ Drawing 18 ] 
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[Drawing 19] 
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[Drawing 20] 
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[Drawing 23] 
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[Drawing 25] 
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[Drawing 26] 



OD 



csi 

CO- 



q: 



o 

GO 



LU 

in 



00 



9 



CP 

or 



^ 



://dossierLipdlinpit.gojp/cgi-biii/tran_web_cgi_ejje?u=http%3A%2F%2FdossierLipd... 5/13/2008 



JP, 2000-075785, A [FULL CONTENTS] 



Page 39 of 39 



[Drawing 27] 
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[Translation done.] 
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